PT-2005-3753 · Unknown · Webarchivex.Dll

Brett Moore · Published 2005-09-14 · Updated 2017-07-11 · CVE-2005-2891

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions WebArchiveX.dll version 5.5.0.76

Description The issue allows remote attackers to read or write to arbitrary files. This is achieved via the (1) MakeArchive or (2) MakeArchiveStr methods.

Recommendations For WebArchiveX.dll version 5.5.0.76, consider disabling the MakeArchive and MakeArchiveStr methods until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-2891

Affected Products

Webarchivex.Dll

References · 7

• 🔥 http://securitytracker.com/alerts/2005/Sep/1014867.html · Exploit
• 🔥 http://security-assessment.com/Advisories/WebArchiveX_-_Unsafe_Methods_Vulnerability.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2891 · Security Note
• http://secunia.com/advisories/16722 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=112611388014937&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22188 · Note
• http://securityfocus.com/bid/14760 · Note